infrastructure/ansible/roles/gateway/files/haproxy.cfg

47 lines
918 B
INI
Raw Normal View History

2019-12-08 16:47:28 +00:00
global
2020-01-26 18:17:55 +00:00
log /dev/log local0
log /dev/log local1 notice
2020-05-09 20:08:27 +01:00
chroot /usr/share/haproxy
pidfile /run/haproxy.pid
2020-01-26 18:17:55 +00:00
stats timeout 30s
user haproxy
group haproxy
daemon
maxconn 10000
2019-12-08 16:47:28 +00:00
defaults
2020-01-26 18:17:55 +00:00
log global
mode http
option httplog
option dontlognull
2019-12-08 16:47:28 +00:00
listen https
2020-01-26 18:17:55 +00:00
bind *:443
mode tcp
timeout http-request 10m
timeout connect 10m
timeout client 10m
timeout server 10m
2020-01-26 18:17:55 +00:00
server default {{ wireguard.clients.intersect.ip }}:443 send-proxy
2019-12-08 16:47:28 +00:00
listen http
2020-01-26 18:17:55 +00:00
bind *:80
stats enable
stats show-node
stats uri /haproxy
stats auth stats:{{ haproxy.stats_pass }}
timeout http-request 10m
timeout connect 10m
timeout client 10m
timeout server 10m
2020-01-26 18:17:55 +00:00
server default {{ wireguard.clients.intersect.ip }}:80 check
2019-12-08 16:47:28 +00:00
2020-01-17 22:56:45 +00:00
{% for port in haproxy.exposed_ports %}
2019-12-08 16:47:28 +00:00
2020-01-17 22:56:45 +00:00
listen expose_{{ port }}
2020-01-26 18:17:55 +00:00
bind *:{{ port }}
mode tcp
server default {{ wireguard.clients.intersect.ip }}:{{ port }}
2019-12-08 16:47:28 +00:00
2020-01-17 22:56:45 +00:00
{% endfor %}